@fern-api/fdr-sdk 1.1.7-45ebcd86eb → 1.1.7-97cbb284fe

package/dist/js/orpc-client.js

@@ -188,6 +188,7 @@ __export(orpc_client_exports, {
   GetSdkDynamicIrUploadUrlsResponseSchema: () => GetSdkDynamicIrUploadUrlsResponseSchema,
   GithubRepositoryIdSchema: () => GithubRepositoryIdSchema,
   GithubTeamSchema: () => GithubTeamSchema,
+  GithubUrlSchema: () => GithubUrlSchema,
   GithubUserSchema: () => GithubUserSchema,
   GoModuleSchema: () => GoModuleSchema,
   GraphQlArgumentSchema: () => GraphQlArgumentSchema,
@@ -3199,9 +3200,36 @@ var import_fetch5 = require("@orpc/openapi-client/fetch");
 // src/orpc-client/docs/v2/library-docs/contract.ts
 var import_contract8 = require("@orpc/contract");
 var z14 = __toESM(require("zod"), 1);
+var ALLOWED_HOSTNAMES = /* @__PURE__ */ new Set(["github.com", "gitlab.com"]);
+var GithubUrlSchema = z14.string().url().describe(
+  "HTTPS URL of a GitHub or GitLab repository. Currently only github.com and gitlab.com are supported. Must match the pattern https://github.com/<owner>/<repo> or https://gitlab.com/<owner>/<repo>."
+).refine(
+  (url) => {
+    try {
+      const parsed = new URL(url);
+      if (parsed.protocol !== "https:") {
+        return false;
+      }
+      if (!ALLOWED_HOSTNAMES.has(parsed.hostname)) {
+        return false;
+      }
+      if (parsed.username || parsed.password) {
+        return false;
+      }
+      return /^\/[\w.-]+\/[\w.-]+(?:\.git)?\/?$/.test(parsed.pathname);
+    } catch {
+      return false;
+    }
+  },
+  { message: "Must be a valid https://github.com/<owner>/<repo> or https://gitlab.com/<owner>/<repo> URL" }
+);
+var SafeBranchSchema = z14.string().regex(/^[a-zA-Z0-9._/-]+$/, "Invalid branch name").nullish();
+var SafePackagePathSchema = z14.string().refine((p) => !p.includes("..") && !p.startsWith("/"), {
+  message: "packagePath must not contain path traversal sequences"
+}).nullish();
 var LibraryDocsBaseConfigSchema = z14.object({
-  branch: z14.string().nullish(),
-  packagePath: z14.string().nullish(),
+  branch: SafeBranchSchema,
+  packagePath: SafePackagePathSchema,
   title: z14.string().nullish(),
   slug: z14.string().nullish()
 });
@@ -3212,13 +3240,13 @@ var CppLibraryDocsConfigSchema = LibraryDocsBaseConfigSchema.extend({
 var StartLibraryDocsGenerationInputSchema = z14.discriminatedUnion("language", [
   z14.object({
     orgId: z14.string(),
-    githubUrl: z14.string(),
+    githubUrl: GithubUrlSchema,
     language: z14.literal("PYTHON"),
     config: PythonLibraryDocsConfigSchema.nullish()
   }),
   z14.object({
     orgId: z14.string(),
-    githubUrl: z14.string(),
+    githubUrl: GithubUrlSchema,
     language: z14.literal("CPP"),
     config: CppLibraryDocsConfigSchema.nullish()
   })
@@ -4566,6 +4594,7 @@ function createFdrORPCClient(options) {
   GetSdkDynamicIrUploadUrlsResponseSchema,
   GithubRepositoryIdSchema,
   GithubTeamSchema,
+  GithubUrlSchema,
   GithubUserSchema,
   GoModuleSchema,
   GraphQlArgumentSchema,